Psst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveCLEATUS Webinar: AI for Government Contracting — Free Webinar — Wednesday, November 11 at 2:00 PM ET

Register Free →

Search

Top

Back to Contracts

IT Security & Privacy Compliance Services

Open

State & Local

Response Deadline01/05/2027, 04:00:00 PM PST

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

This subcontract for IT Security and Privacy Compliance Services focuses on maintaining the SaPHIRE system's adherence to state and federal security policies for prime contractors working with the California Department of Public Health. The scope of work includes implementing security operations, performing privacy audits, and following the security standards established by the California Department of Technology and the California Department of Public Health. The contractor is responsible for utilizing security monitoring tools and encryption to ensure system integrity, while delivering regular security compliance reports and updated configurations. This engagement is based in Sacramento and falls under NAICS code 541519, with a response deadline set for January 6, 2027.

General Info

IT security and privacy compliance services for SaPHIRE system, due January 6, 2027.

Agency

California Department of Public Health

NAICS

541519 - Other Computer Related Services

Place of Performance

Sacramento, CA, USA

Set-Aside

NONE

Documents

This scope was carved out of 25-10401.

The full solicitation package (97 documents), including the RFP, is on the prime solicitation, not on this scope.

View the prime solicitation

CDPH SaPHIRE M&O - IT Services

AI Contract Breakdown

Uniform Contract Format

No documents to break down

The breakdown needs solicitation documents. None were found from this contract's source.

Timeline

PostedJan 6

subcontract

Response DeadlineJan 5

Submission deadline

Response Deadline

01/05/2027, 04:00:00 PM PSTin about 2 months

Ready to pursue this opportunity?

Get full access to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more

AgencyCalifornia Department of Public Health

ContactsNo contacts available

OfficeN/A

Organization / AgencyCalifornia Department of Public Health

Office AddressN/A

ContactsNo contact information available

Full Description

Show more

Ensures the SaPHIRE system remains compliant with state and federal security policies for prime contractors on California Department of Public Health (CDPH) projects. Implements security operations and performs privacy audits per Exhibit D and E requirements. Adheres to California Department of Technology (CDT) and CDPH security standards using security monitoring tools and encryption. Delivers security compliance reports and updated configurations.

Similar Contracts

Same NAICS industry code

Palo Alto Firewall and Panorama Maintenance RenewalThis subcontract, managed by the F&A-IS Administration in California, provides annual premium support and subscription renewals for Palo Alto Networks security infrastructure. The scope of work specifically covers maintenance for five PA-850 firewalls and Panorama for 25 devices for the performance period spanning January 14, 2027, through January 13, 2028. To be eligible, the contractor must maintain authorized Palo Alto Networks partner status and adhere to the Authority's Code of Conduct. The primary objective of the agreement is the delivery of active premium support subscriptions and licenses to support prime contractors on The Authority projects. The solicitation was posted on November 11, 2026, with a response deadline of December 8, 2026.

F&A-IS Administration

POSTED

about 15 hours ago

DEADLINE

ExaGrid Maintenance and Support (M&S) RenewalThis subcontract opportunity, managed by the Florida Technology Services agency, seeks to secure official manufacturer maintenance and support renewals for ExaGrid storage systems. The contract specifically covers ExaGrid Raw 144TB Capacity Systems and 10Gigabit Ethernet Dual Port SFP+ Optical Add Ons for the 2026-2027 term. These services are intended for prime contractors working on City municipal IT projects to ensure continuous system stability and manufacturer-backed support. To be eligible for this award, providers must hold authorized ExaGrid partner or reseller status. The solicitation was posted on November 10, 2026, with a response deadline of November 23, 2026. The project falls under NAICS code 541519, focusing on other computer related services to maintain critical data storage infrastructure.

Technology Services

POSTED

about 16 hours ago

DEADLINE

Tier 2 Technical and Desktop Support ServicesThe Tier 2 Technical and Desktop Support Services subcontract focuses on providing advanced technical troubleshooting and field support for prime contractors working on projects for the Prince George's County Office of Information Technology. The primary objective is to resolve complex hardware and software issues that have been escalated from the service desk, ensuring restored functionality through on-site support across various County work locations. Qualified personnel must undergo a criminal background check and hold a security certification to perform these duties. This opportunity is categorized under NAICS code 541519 and is associated with the state of Maryland. Interested parties should note the response deadline of December 17, 2026.

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Tier 1 Service Desk Analyst ServicesThis subcontract opportunity for Tier 1 Service Desk Analyst Services involves providing initial point-of-contact technical support for prime contractors working on projects for the Prince George's County Office of Information Technology in Maryland. The selected provider will be responsible for managing ticket intake and initial triage through the County's IT service management systems, ensuring all activities align with established monthly Service Level Requirements. Key deliverables include the resolution of Tier 1 tickets and the maintenance of detailed incident logs. To qualify for this role, personnel must undergo a criminal background check and hold a valid security certification. Interested parties should note that the response deadline is December 17, 2026, and the work falls under NAICS code 541519.

POSTED

about 17 hours ago

DEADLINE

in about 1 month

Prince George’s County, Maryland Office of Information Technology Enterprise IT Service Desk Managed Services

Solicitation # WS2154508994

Prince George’s County, Maryland, through the Office of Information Technology, is seeking a firm to provide Enterprise IT Service Desk Managed Services. The selected contractor must provide a fully staffed service desk operating 24 hours a day, 7 days a week, utilizing certified Tier 1 and Tier 2 technicians. The primary objective is to increase first contact resolution by applying ITIL best practices, modernizing service delivery with emerging technology, and expanding Tier 0 self-service options. This is a restricted solicitation open only to prime contractors certified as County-Based Business (CBB), County-Based Small Business (CBSB), County-Based Minority Business Enterprise (CBMBE), or County-Based Small Minority Business Enterprise (CBSMBE). The contract is a firm-fixed-price agreement consisting of a two-year base period with two optional one-year extensions, though funding beyond the first year is contingent upon appropriation. Award will be based on a best value trade-off analysis where technical factors are weighted more heavily than price. Proposals must be submitted via the SPEED eProcurement Platform by December 17, 2026, and must be divided into a Technical Proposal volume and a Price Proposal volume. Key requirements include a 15% CBMBE supplier utilization goal, strict adherence to ADA and non-discrimination mandates, and the provision of comprehensive security compliance documentation and background checks for all assigned personnel.

POSTED

about 17 hours ago

DEADLINE

in about 1 month

IT Deployment and Asset Management ServicesThis subcontract for IT Deployment and Asset Management Services supports prime contractors on projects at Minot State University. The scope of work involves the deployment of laptops and workstations, the utilization of asset management systems to track hardware, and the provision of continuous technical support. The successful contractor is responsible for delivering all registered hardware and a finalized asset registry. This opportunity is categorized under NAICS code 541519 and is associated with the state of North Dakota, with a response deadline set for November 18, 2026.

POSTED

about 17 hours ago

DEADLINE

Email Security ServicesThis subcontract for Email Security Services, issued by the Massachusetts Technology Collaborative, focuses on the deployment and management of advanced email protection systems for prime contractors involved in MassTech Rural Health Facility projects. The scope of work includes the implementation of advanced email security gateways to provide managed filtering, threat removal, and the automatic elimination of malicious links and dangerous attachments to defend against phishing attacks. The contract is categorized under NAICS code 541519 and is associated with a place of performance in Westborough, Massachusetts. It was posted on November 10, 2026, with a response deadline extending to November 5, 2035.

Massachusetts Technology Collaborative

POSTED

about 18 hours ago

DEADLINE

in almost 9 years

Managed Detection and Response (MDR) ServicesThe Managed Detection and Response (MDR) Services subcontract, issued by the Massachusetts Technology Collaborative, provides 24/7 endpoint security monitoring and response for prime contractors working on MassTech Rural Health Facility projects. Utilizing the SentinelOne technology stack, the service focuses on automated detection, alerting, analyst review, and the escalation of high-confidence security incidents to ensure continuous protection and compliance with cyber insurance requirements. The contract is categorized under NAICS code 541519 and is performed in Westborough, Massachusetts. Key deliverables include continuous monitoring services and the provision of detailed incident escalation reports to maintain the security posture of the involved health facility projects.

Massachusetts Technology Collaborative

POSTED

about 18 hours ago

DEADLINE

in almost 9 years

Incident Response and Data Protection ServicesThe Incident Response and Data Protection Services subcontract supports prime contractors on Department of Information Resources projects within the state of Texas. The scope of work focuses on mitigating cyber threats through emergency response, ensuring continuous data availability via backup and replication, and maintaining security through media protection sanitization. Key deliverables include the provision of detailed incident reports and backup verification logs to ensure operational resilience. This opportunity is categorized under NAICS code 541519 and was posted on November 10, 2026. Interested parties must submit their responses by the deadline of February 10, 2027. Further details regarding this procurement can be accessed through the Texas SmartBuy portal.

Department of Information Resources

POSTED

about 18 hours ago

DEADLINE

Software Maintenance and Technical Support for Jurisdiction OnlineThis subcontract focuses on providing software maintenance and technical support for the Jurisdiction Online system, specifically supporting prime contractors on State of Alabama Elevator Inspections projects. The scope of work includes delivering comprehensive computer support services, troubleshooting technical issues, and ensuring continuous system availability in strict accordance with state electronic interface standards. Success is measured by the consistent availability of the system and the timely resolution of support tickets. To be eligible for this opportunity, contractors must be enrolled in E-Verify and registered with the Alabama Secretary of State. The project falls under NAICS code 541519. Interested parties should note the response deadline of November 16, 2026, for this Alabama-based agency requirement.

Elevator Inspections

POSTED

about 19 hours ago

DEADLINE

4010/4015-Jurisdiction Online

Solicitation # SRC0000037643

The State of Alabama, specifically the Elevator Inspections agency, is soliciting computer support for the Inspections Division under the project titled 4010/4015-Jurisdiction Online. This solicitation, numbered SRC0000037643, requires responses to be submitted electronically through the Alabama Buys portal. The resulting contract is limited to a total cost of 25,000 dollars, including any subsequent renewals, and may be renewed annually for a maximum term of five years. All disputes that cannot be resolved through negotiation will be handled in Montgomery, Alabama. The State reserves the right to evaluate bids based on cost realism, price reasonableness, and supplier qualifications, including the request for professional licenses and certificates of insurance. Awardees must comply with strict regulatory requirements, including enrollment in the E-Verify program, registration with the Alabama Secretary of State for out-of-state entities, and certification of tax compliance and non-collusion. Payments are handled via electronic methods such as P-cards or EFT, and the State maintains the right to inspect all products before final acceptance in accordance with the Universal Commerce Code.

Elevator Inspections

POSTED

about 19 hours ago

DEADLINE

Cybersecurity and Compliance ArchitectThis subcontract for a Cybersecurity and Compliance Architect supports the South Dakota Department of Human Services by implementing critical security layers and access controls for prime contractors. The scope of work focuses on the configuration of Multi-Factor Authentication, Single Sign-On, and Role-Based Access Controls to secure system entry. Additionally, the project requires the delivery of a comprehensive security architecture and the implementation of encryption for data both at rest and in transit. To ensure regulatory compliance, the project must adhere to NIST and HIPAA/HITECH standards. Key deliverables include the development of immutable audit logging and the establishment of secure records retention triggers. Interested parties should note the response deadline of January 8, 2027, for this South Dakota State Government initiative categorized under NAICS code 541519.

South Dakota State Government

POSTED

about 19 hours ago

DEADLINE

in about 2 months

More opportunities from California Department of Public Health

Same awarding agency

CDPH SaPHIRE M&O - IT Services

Solicitation # 25-10401

The California Department of Public Health (CDPH) is soliciting proposals under RFP 25-10401 for Maintenance and Operations (M&O) support of the Surveillance and Public Health Information Reporting and Exchange (SaPHIRE) system. This critical system operates 24/7 to ingest and process electronic laboratory results and case reports for over 80 reportable conditions, interfacing with the CDPH Rhapsody Gateway and Snowflake data warehouse. The contract features a base term of five years with a maximum potential term of eight years. The selected contractor will be responsible for system maintenance, infrastructure support, data validation, normalization, and the management of data submitters to ensure timely and accurate public health surveillance. The procurement process utilizes a point-scoring system totaling 6,000 points, weighted equally between non-cost (3,000 points) and cost (3,000 points) evaluations. Bidders must submit proposals in two separate volumes: Volume 1 for administrative and technical requirements and Volume 2 for cost, using a specific cost workbook. Key personnel requirements include a Senior Project Manager, Solution Architect, Scrum Master, Rhapsody Technical Lead, System Operations Lead, and Data Submitter Management Lead, all of whom must meet mandatory experience thresholds. Technical compliance is strictly governed by NIST SP 800-53, CA SIMM 5300, and HIPAA privacy rules, with specific requirements for F5 Silverline web application firewalls and comprehensive security and recovery planning. Contract administration involves monthly invoicing in arrears, with payments contingent upon the approval of Deliverable Acceptance Documents by the IT Operations Manager or Product Owner. The contract is subject to the State of California's Prompt Payment Act and a budget contingency clause. Performance is primarily remote, though travel to CDPH locations may be required. Bidders may claim preferences for Small Business, Disabled Veteran Business Enterprise (DVBE), and the Target Area Contract Preference Act (TACPA) by submitting the required certifications to the Department of General Services.

Computer Facilities Management Services

POSTED

DEADLINE

in about 2 months

Rhapsody Integration Engine Maintenance & DevelopmentThis subcontract focuses on the specialized maintenance and development of the Rhapsody integration engine for prime contractors supporting the California Department of Public Health. The primary scope of work involves configuring Rhapsody engines and managing message processing workflows specifically for electronic Case Reporting and Electronic Laboratory Reporting. Additionally, the contractor is responsible for maintaining the integration layer that connects various health data sources to the operational data store to ensure optimized configurations. The project requires a Rhapsody Technical Lead with one to three years of development experience to lead the technical execution. Performance of these services is based in Sacramento, California. The opportunity was posted on January 6, 2026, with a response deadline set for January 6, 2027, under NAICS code 541511.

Custom Computer Programming Services

POSTED

DEADLINE

in about 2 months

Agile Project Management (Scrum Master)This subcontract for the California Department of Public Health requires a certified Scrum Master to provide Agile framework leadership for M&O workstreams. The selected provider will be responsible for facilitating scrum ceremonies, managing product backlogs, and coordinating communication between technical leads and the State using tools like Jira or Azure DevOps. Key deliverables include sprint reports, velocity charts, and maintained project backlogs. The project is based in Sacramento and falls under NAICS code 541611. The solicitation was posted on January 6, 2026, with a response deadline set for January 6, 2027.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 2 months

Data Submitter Management ServicesThe Data Submitter Management Services subcontract supports the California Department of Public Health by providing management and coordination of external data submitters for prime contractors. The scope of work includes onboarding new submitters, managing data submission feeds, and ensuring overall data quality and compliance through the use of SaPHIRE data submission portals and interfaces. A Data Submitter Management Lead is required to oversee these operations and deliver a validated list of active submitters and data streams. This project is based in Sacramento and falls under NAICS code 541611. The solicitation was posted on January 6, 2026, with a response deadline set for January 6, 2027.

Administrative Management and General Management Consulting Services

POSTED

DEADLINE

in about 2 months

Cloud System Operations & Infrastructure ManagementThis subcontract for the California Department of Public Health focuses on the cloud system operations and infrastructure management of the SaPHIRE system. The selected provider will be responsible for day-to-day operations, including help desk support, application releases, environment management, system monitoring, incident management, and technology recovery utilizing MySQL databases. Key deliverables include the provision of uptime reports and detailed incident logs to ensure system stability. The project requires a System Operations Lead with at least three years of experience in IT operations management and cloud-hosted data systems. Based in Sacramento, the contract is categorized under NAICS code 541513. The solicitation was posted on January 6, 2026, with a response deadline set for January 6, 2027.

Computer Facilities Management Services

POSTED

DEADLINE

in about 2 months

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Join 750+ contractors already using CLEATUS